Privacy Policy

Brain Gym is a cognitive training app operated by Adaptive Lab (New Zealand). This page explains, in plain English, what the training app collects, why, and the choices you have. It covers the training app only. Your purchase, login and membership are handled by Kajabi and are governed by Kajabi's own privacy policy.

The research programme (opt-in)

You can choose to include your data in cohort research from the Locker. It is off by default, anonymised (pseudonymous ids, no emails or handles), aggregate-only, and revocable at any time; revoking removes you from all future exports. You can also download everything the app stores about you, or delete your account entirely, from the same place.

Who we are

Adaptive Lab is responsible for this app. You can reach us at luke.jimmieson@cogcon.co.nz.

What we collect

• A numeric member id. When you open the app from a course lesson, Kajabi tells us your member id (a number). We use it to attach your training to you. We do not store your name or email address in the training app.
• Training and assessment performance. Per-trial accuracy and reaction times, difficulty levels, scores, and your 1 to 5 self-ratings (stress, alertness, confidence, and post-primer arousal). This is the whole point of the product: it powers your progress dashboard and adapts the difficulty to you.
• Basic device info. With each assessment we record your browser, screen size, pointer type and whether you used a keyboard or touch, so your scores stay comparable across sessions.
• Small items stored on your device.A short-lived access token (in your browser's session storage) and a few flags (for example which sessions you have finished) so the app works and remembers where you are. These are not advertising or tracking cookies.

How we use it

• To run your training, score it, adapt the difficulty and show your dashboard.
• When you finish a baseline, mid-point or final assessment, the app tells your Kajabi course page that an assessment was completed, so your course can tick it off and run any enrolment automations. That signal carries the phase name only and no personal data: the Kajabi page acts using your own logged-in session, and the training app never sees your email.

What we don't do

• We don't sell your data or share it with advertisers.
• We don't run third-party analytics or tracking inside the training app.
• We don't collect health records. Your performance data is training feedback, not a medical assessment.

Where it lives

Your training data is stored with Supabase (a managed Postgres database), encrypted in transit and at rest, on servers in Sydney, Australia. The app itself runs on Vercel. Because these providers are outside New Zealand, your data is held overseas under comparable safeguards. Payment and membership data stays with Kajabi under their privacy policy.

How long we keep it

We keep your training data while your membership is active so your dashboard and before and after comparisons work. If you ask us to delete it, or a reasonable period after your membership ends, we remove it.

Your rights

Under the New Zealand Privacy Act 2020 you can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Email luke.jimmieson@cogcon.co.nz (tell us your Kajabi account so we can find your records) and we will action it within 20 working days.

Children

Brain Gym is intended for adults. It is not designed for or directed at children under 16.

Changes to this policy

If we change how we handle your data, we will update this page and the date at the top.